IR-2: Incident Response Training

a time period within which incident response training is to be provided to system users assuming an incident response role or responsibility is defined;

frequency at which to provide incident response training to users is defined;

frequency at which to review and update incident response training content is defined;

events that initiate a review of the incident response training content are defined;